AI Readiness Assessment
Evidence-informed scoring across governance, risk, data foundations, system visibility, and lifecycle management - designed for proportionate AI governance you can explain and defend in audit.
Designed to align with ISO/IEC 42001 intent and integrate cleanly with an ISO/IEC 27001-aligned ISMS approach.
ISO-literate by design - consistent scoring discipline and audit-friendly reporting.
Instant digital download. Organisational licence. No subscription. £349 one-off purchase - typically less than a single day of consultancy discovery. Updates within the v1.x version family included.
Licensed to a single legal entity. Outputs may be shared with auditors, customers, regulators, and advisers for assurance.
By the end of today you will have
- A scored AI readiness baseline and maturity level - a defensible starting position you can explain to leadership
- A clear view of the top gaps and what to fix first - prioritised actions that move readiness fastest
- A board-ready view of risks, decisions, and next 90 days - decision asks and next steps in exec language
- A repeatable cadence for quarterly or annual refresh without rebuilding - reuse the same rubric and templates each cycle
- See example outputs: Download sanitised sample pack
Designed for
- CISO and Heads of Risk who need defensible assurance and board narrative
- GRC and InfoSec managers who need a practical, repeatable assessment system
- ISO-literate organisations establishing a baseline for responsible AI governance
- Teams under customer, audit, or reputational pressure to evidence control
- Organisations dealing with uneven adoption and shadow AI
Illustrative system visuals shown. Toolkit files are provided as structured working artefacts.
What this replaces
Most organisations start AI governance with inconsistent checklists, ad hoc workshops, and scattered documents.
AI assurance expectations are rising across customers, regulators, and internal audit. This baseline gives you a defensible starting point.
Without a baseline, assurance conversations become opinion-led - and that is where avoidable risk and board discomfort shows up.
This toolkit replaces that with one structured assessment and reporting pack that gives you:
- consistent scoring discipline
- repeatable executive reporting
- clearer prioritisation than generic AI principles documents
- faster internal alignment without paying for consultancy discovery days
It is not a certification, audit, or legal assessment. It supports practical, audit-ready governance in day-to-day use, but does not guarantee certification outcomes.
How it works
Run the baseline (2-6 hours)
- Confirm scope (organisation, programme, or department)
- Run a short working session (typically 3-5 stakeholders)
- Score each statement using evidence where possible
- Review domain scores, overall score, and maturity classification
- Capture findings using the report template
- Agree priorities using the roadmap appendix
- Present risks and decision asks using the Board and Exec deck template
Typical format:
- 2-hour scoring workshop
- 30-60 minutes to finalise findings and outputs
Refresh quarterly or annually (faster)
This toolkit is designed for reuse. You do not need to repurchase for refresh cycles.
- Re-score using the same rubric
- Complete the one-page quarterly update
- Maintain a single evolving Board and Exec deck over time rather than creating a new pack each cycle
Trigger an additional refresh if:
- a new AI system is introduced or a major model update occurs
- supplier, hosting, or data sources materially change
- there is a significant incident (security, privacy, model failure, safety)
- new regulatory, customer assurance, or internal audit requirements emerge
What you get (10 artefacts)
This is a complete assessment and reporting pack - not a single spreadsheet.
-
AI Readiness Assessment workbook
Core scoring tool that calculates domain scores, overall score, and maturity outputs. -
How to Use guide
Step-by-step guidance for completion, scoring discipline, and interpretation. -
AI Readiness Maturity Model
Maturity level definitions used by the assessment. -
AI Readiness Assessment report template
Template to document findings and recommendations. -
Roadmap Appendix (Appendix A)
Suggested next steps based on assessed maturity level. -
Licence and Use Notice
Permitted use, restrictions, and IP boundaries. -
Board and Exec slide deck template
Executive-ready deck for risks, priorities, and decision asks. Designed to be maintained over time. -
Quarterly Baseline Refresh Pack
Cadence guidance, trigger events, minimum roles, inputs, and expected outputs. -
Quarterly AI Governance Readiness Update template
One-page quarterly update capturing what changed, top risks, decisions, and the next 90-day plan. -
Refund Policy and IP Terms
Refund policy, IP terms, and usage boundaries.
Outputs and evidence you can generate
- Overall AI readiness score and maturity level
- Domain-level scores with clear strengths and gaps
- A prioritised improvement plan based on what moves readiness fastest
- A leadership-ready assessment report for assurance and audit conversations
- A Board and Exec deck that translates readiness into risk and decision asks
- A repeatable quarterly or annual readiness update using the same rubric
Sample output preview (sanitised)
See the format of the outputs without exposing the workbook.
Includes:
- 1-page executive summary (dummy data)
- Sample domain findings page (dummy gaps and strengths)
- Sample roadmap snippet (example priorities)
Licence summary (plain English)
- Licensed to a single legal entity (the purchasing organisation)
- Authorised users include employees and individual contractors acting on your behalf
- Outputs may be shared with auditors, customers, regulators, and advisers for assurance
- Toolkit files may not be shared, resold, or reused as a commercial method across other organisations
- Updates within the v1.x version family are included. v2.0 may be offered as a paid upgrade
- Access to the toolkit files is provided for the life of the product. We recommend retaining a local copy
When this is not for you
- You want generic AI awareness material or a simple checklist
- You already operate a fully embedded and audited AI governance framework
- You want automated technical tooling rather than a governance-led assessment system
Procurement justification
The AIBI AI Readiness Assessment Toolkit is a one-off £349 governance assessment and reporting pack designed to establish and maintain a defensible AI readiness baseline across governance, risk, data foundations, system visibility, and lifecycle management.
It provides a structured evidence-informed alternative to ad hoc internal reviews or early-stage consultancy discovery, producing repeatable outputs and executive-ready findings.
The toolkit is designed for reuse. Organisations can run an initial baseline and then refresh quarterly or annually using the same rubric, reporting templates, and an evolving Board and Exec deck. Outputs can be shared with auditors, customers, regulators, and advisers for assurance purposes, while the underlying toolkit materials remain protected as AIBI Systems intellectual property.
Designed for internal approval and procurement workflows.
Frequently asked questions
Is this aligned with ISO/IEC 42001?
It is designed to align with ISO/IEC 42001 intent and support proportionate AI governance. It is not a certification assessment.
Is this a certification, audit, or legal assessment?
No. This toolkit supports practical, audit-ready governance and evidence, but it does not provide legal advice and does not guarantee certification outcomes.
How long does the assessment take?
Typically 2 to 6 hours depending on scope and evidence availability. Refresh cycles are faster because you reuse the same rubric and only capture what changed.
Who should complete it?
For best results, complete it collaboratively. Typical participants include risk and governance leads, InfoSec, data or AI leads, operational owners, and internal assurance.
Can we share outputs with auditors or customers?
Yes. You may share outputs such as reports and decks for assurance purposes. The toolkit files themselves must not be shared.
Can we use a consultancy to help run the assessment?
Yes. Individual contractors, consultants, or professional advisers may support you as authorised users acting on your behalf. They must not retain copies beyond the engagement.
Is the licence per user or per organisation?
It is licensed to a single legal entity. Authorised users include employees and individual contractors acting on your behalf. See the Licence and Use Notice for full terms.
Do we need to buy it again for refresh cycles?
No. You reuse the same rubric and templates for refresh cycles.
What about updates?
Updates within the v1.x version family are included. A future major version (v2.0) may be offered as a paid upgrade.
Instant digital download. Organisational licence. No subscription. £349 one-off purchase - typically less than a single day of consultancy discovery. Updates within the v1.x version family included.
Licensed to a single legal entity. Outputs may be shared with auditors, customers, regulators, and advisers for assurance.